Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a63d6d-5453-4c01-98b8-6c020968e75a/1/DGZbHrEnmK4OUTDZpLXIYPMn-xo.mft
File: DGZbHrEnmK4OUTDZpLXIYPMn-xo.mft (raw, json)
Hash identifier: IdBH1SHhAw8V8AUsICpu5BjabmX5jOcW5fWRnWzjHr0=
Subject key identifier: F3:D3:29:F0:10:F9:8A:EA:46:CE:CB:F9:12:9A:9E:88:6C:2F:73:26
Authority key identifier: 0C:66:5B:1E:B1:27:98:AE:0E:51:30:D9:A4:B5:C8:60:F3:27:FB:1A
Certificate issuer: /CN=0c665b1eb12798ae0e5130d9a4b5c860f327fb1a
Certificate serial: 019F91DA2FDAB9EC0C19A7F87E893E2E0CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGZbHrEnmK4OUTDZpLXIYPMn-xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a63d6d-5453-4c01-98b8-6c020968e75a/1/DGZbHrEnmK4OUTDZpLXIYPMn-xo.mft
Manifest number: 0164
Signing time: Fri 24 Jul 2026 02:00:23 +0000
Manifest this update: Fri 24 Jul 2026 02:00:23 +0000
Manifest next update: Sat 25 Jul 2026 02:00:23 +0000
Files and hashes: 1: DGZbHrEnmK4OUTDZpLXIYPMn-xo.crl (hash: FdAP/+kSViwbkiF8N4LulJGXgH4dcwoSRfbjZ+lAJMw=)
2: HWDXKcpeYuIm0JZrEg_ziDSr5-U.roa (hash: nvDBJqWAeki2gr4Pm4DWKQgwgBSew3rmSC0QFEN6mlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a63d6d-5453-4c01-98b8-6c020968e75a/1/DGZbHrEnmK4OUTDZpLXIYPMn-xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a63d6d-5453-4c01-98b8-6c020968e75a/1/DGZbHrEnmK4OUTDZpLXIYPMn-xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGZbHrEnmK4OUTDZpLXIYPMn-xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:2f:da:b9:ec:0c:19:a7:f8:7e:89:3e:2e:0c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c665b1eb12798ae0e5130d9a4b5c860f327fb1a
Validity
Not Before: Jul 24 02:00:23 2026 GMT
Not After : Jul 25 02:00:23 2026 GMT
Subject: CN=f3d329f010f98aea46cecbf9129a9e886c2f7326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:97:d2:02:bb:83:2d:15:9b:aa:0e:7a:03:
72:11:c6:fb:8e:0e:be:5d:35:f6:ab:fa:c4:2d:e2:
c2:cf:35:7e:77:51:d5:96:bd:80:22:dd:b2:71:c5:
63:e1:b3:41:4f:2d:5c:67:ef:a5:9d:87:c5:4b:07:
bc:8f:1d:e3:2a:e2:22:78:88:df:e9:bb:7f:1c:be:
cd:e9:b1:3e:26:00:0a:66:09:f3:38:9f:60:77:d2:
ef:ad:0a:29:fd:63:cc:9b:a0:a4:dd:a7:e6:ec:50:
be:61:5c:4f:7f:1e:76:a6:c4:23:29:e9:90:ff:d9:
07:1b:6a:3b:3f:fa:e1:ee:1a:96:c0:f9:a7:7b:b7:
39:9e:78:5a:42:d9:3a:4a:62:4f:d3:08:6d:50:c8:
36:00:35:cc:36:23:a1:90:ff:12:34:00:36:a0:7e:
e7:de:a0:20:a0:b7:27:ef:9a:f7:38:5f:cf:70:40:
26:48:31:76:e4:95:99:16:66:0e:ef:51:16:0d:27:
09:93:02:9e:27:96:d4:19:96:17:e1:3e:dd:6c:9d:
70:f9:ad:81:25:56:29:b8:5d:59:93:c3:6c:b8:0e:
55:a5:be:da:ee:8a:0d:2b:14:66:59:d8:39:7a:c3:
65:8e:e2:7a:59:26:e8:c4:7a:0f:17:40:5c:1e:7d:
e3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D3:29:F0:10:F9:8A:EA:46:CE:CB:F9:12:9A:9E:88:6C:2F:73:26
X509v3 Authority Key Identifier:
keyid:0C:66:5B:1E:B1:27:98:AE:0E:51:30:D9:A4:B5:C8:60:F3:27:FB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGZbHrEnmK4OUTDZpLXIYPMn-xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a63d6d-5453-4c01-98b8-6c020968e75a/1/DGZbHrEnmK4OUTDZpLXIYPMn-xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a63d6d-5453-4c01-98b8-6c020968e75a/1/DGZbHrEnmK4OUTDZpLXIYPMn-xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7c:b8:62:a2:d3:3e:1c:93:1a:74:61:3f:1a:0c:57:b3:a3:
a8:ed:e5:3b:89:bf:39:8e:7a:5f:6c:ac:91:48:cd:e8:92:12:
21:5c:e7:1c:e3:bc:0f:f8:0e:b6:9a:cf:e8:f3:b4:3a:3b:96:
2f:0e:43:63:46:a4:8c:12:e1:91:23:4f:6d:6a:1c:29:15:1c:
4c:e2:fd:5f:50:a5:31:4f:97:c4:68:d9:79:d9:32:14:f6:e9:
63:d5:3c:78:8d:7e:15:63:9d:92:58:e7:9c:9a:ab:35:54:a7:
9f:5f:34:de:37:41:fe:87:0e:c6:bd:3e:bb:6d:f9:fe:10:a2:
5f:fc:e9:9d:29:c1:64:ba:37:70:7f:22:29:e0:c8:fd:f2:5d:
a2:99:4d:f1:0c:ca:71:d2:93:c8:2f:dc:c7:e3:6a:20:8b:ed:
4c:c8:a1:ac:c0:a4:38:fe:08:10:07:a5:dc:ad:d3:24:35:8e:
91:58:c2:ee:11:e9:e7:d0:d9:8a:11:06:d0:be:66:ca:e9:2e:
86:93:11:a4:a0:be:ef:5b:9c:2e:78:33:c0:6f:4b:08:29:ba:
7e:4e:fc:07:53:1f:f8:a7:1f:1c:56:ce:96:ad:60:75:b9:e6:
06:53:10:4c:6c:12:11:60:cc:f2:b9:28:14:d6:a7:b6:05:c7:
1f:5c:91:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:05 2026 by rpki-client